better-supabase 0.9.0 → 0.11.0

package/dist/edge/index.d.ts

@@ -1,19 +1,19 @@
-import { f as Result } from "../result-Cj3yWhjH.js";
-import { a as AnyModels, i as AnyFunctions } from "../types-YfwpIE-d.js";
-import { t as StandardSchemaV1 } from "../standard-C3_AAF3g.js";
+import { f as Result } from "../result-BREt7qOh.js";
+import { a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
+import { t as StandardSchemaV1 } from "../standard-BcUQuUgu.js";
 import { s as PermissionRef, t as AnyAuthorizer } from "../authorizer-eiOjo-3l.js";
-import { t as BetterSupabase } from "../define-DxHHbNEb.js";
-import { i as ServerContext, s as ServerOptions, t as BetterServer } from "../server-types-OohhIQb2.js";
-import { t as AuthSession } from "../view-Dv0A949a.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-C7I8kLK_.js";
-import { s as BlockRequireOptions } from "../kit-D5S7KNFe.js";
-import { n as FunctionContract, t as DescribedFunction } from "../function-contract-B4c0XuTU.js";
+import { t as BetterSupabase } from "../define-M_r1d2AT.js";
+import { a as ServerContext, c as ServerOptions, n as BetterServer } from "../server-types-BKN_R4Ws.js";
+import { t as AuthSession } from "../view-Bf7e07rQ.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-CEBC6KUX.js";
+import { s as BlockRequireOptions } from "../kit-BeZX2pR_.js";
+import { n as FunctionContract, t as DescribedFunction } from "../function-contract-DWqFl_QO.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
-import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-D2vEQVXI.js";
-import { t as ResourceMap } from "../resources-BklF-rjz.js";
-import { t as defineAction } from "../resource-execute-D0yQ-8WR.js";
+import { n as SUPABASE_CORS_HEADERS, r as corsConfig, t as CorsOptions } from "../cors-kLq6VM06.js";
+import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-CGr0BbL-.js";
+import { t as ResourceMap } from "../resources-BiQpsM6O.js";
+import { t as defineAction } from "../resource-execute-ruP2L1op.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
-import { WithCorsConfig } from "@supabase/middleware/cors";
 //#region src/bridges/edge.d.ts
 /** The platform context Workers pass as the third `fetch` argument. */
 interface EdgeExecutionContext {
@@ -45,7 +45,7 @@ type TypedFunction<In, Out> = EdgeHandler & DescribedFunction & {
  */
 type ContractOf<T> = T extends TypedFunction<infer In, infer Out> ? FunctionContract<In, Out> : never;
 type Returned<Out> = Out | Result<Out> | Response | PromiseLike<Out | Result<Out> | Response> | undefined;
-interface FunctionDefinition<I extends StandardSchemaV1, Out, M extends AnyModels, F extends AnyFunctions, E, C, P> extends MiddlewareOptions {
+interface FunctionDefinition<I extends StandardSchemaV1, Out, M extends AnyModels, F extends AnyFunctions, E, C, P, B> extends MiddlewareOptions {
   /** Parses the JSON body. A body it rejects answers 422 with the issues. */
   readonly input: I;
   /**
@@ -56,7 +56,7 @@ interface FunctionDefinition<I extends StandardSchemaV1, Out, M extends AnyModel
   /** A one-line summary for the operation `functionRoute` describes in `better-supabase/spec`. */
   readonly summary?: string;
   /** Runs as the caller with the parsed input. Returns data or a `Result`. */
-  readonly handler: (input: StandardSchemaV1.InferOutput<I>, ctx: ServerContext<M, F, E, C, P> & {
+  readonly handler: (input: StandardSchemaV1.InferOutput<I>, ctx: ServerContext<M, F, E, C, P, B> & {
     readonly request: Request;
   }) => Returned<Out>;
 }
@@ -75,17 +75,9 @@ interface FunctionDefinition<I extends StandardSchemaV1, Out, M extends AnyModel
  * Deno.serve(sendInvite);
  * ```
  */
-export declare function defineFunction<I extends StandardSchemaV1, Out, M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown>(edge: Pick<BetterEdge<M, F, E, C, P>, "handler">, definition: FunctionDefinition<I, Out, M, F, E, C, P>): TypedFunction<StandardSchemaV1.InferInput<I>, Out>;
+export declare function defineFunction<I extends StandardSchemaV1, Out, M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(edge: Pick<BetterEdge<M, F, E, C, P, string, B>, "handler">, definition: FunctionDefinition<I, Out, M, F, E, C, P, B>): TypedFunction<StandardSchemaV1.InferInput<I>, Out>;
 //#endregion
 //#region src/edge/index.d.ts
-export interface CorsOptions {
-  /** Allowed origins, or `*`. Defaults to `*`. */
-  readonly origin?: string | readonly string[];
-  /** Defaults to the headers supabase-js sends. */
-  readonly headers?: readonly string[];
-  readonly methods?: readonly string[];
-  readonly maxAge?: number;
-}
 export interface EdgeOptions extends ServerOptions {
   /** Answer preflights and add CORS headers. `true` uses Supabase's defaults. */
   readonly cors?: boolean | CorsOptions;
@@ -110,26 +102,26 @@ type ParamNames<K extends string> = K extends `${string}:${infer Name}/${infer R
  */
 export type RouteParams<K extends string> = { readonly [N in ParamNames<K> | (K extends `${string}/*` ? "*" : never)]: string; };
 /** A route handler: the request, the caller's context and the path params. */
-export type EdgeRouteHandler<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Params = Readonly<Record<string, string>>> = (request: Request, ctx: ServerContext<M, F, E, C, P> & {
+export type EdgeRouteHandler<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Params = Readonly<Record<string, string>>, B = unknown> = (request: Request, ctx: ServerContext<M, F, E, C, P, B> & {
   readonly params: Params;
   readonly session: AuthSession<C, P>;
   readonly tenant: string | undefined;
 }) => unknown;
 /** A route with its own guard: `allow`, `aal`, `scopes`, `requireTenant`, `authorize`. */
-export interface EdgeRoute<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Params = Readonly<Record<string, string>>> extends BlockRequireOptions<C, P> {
-  readonly handler: EdgeRouteHandler<M, F, E, C, P, Params>;
+export interface EdgeRoute<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Params = Readonly<Record<string, string>>, B = unknown> extends BlockRequireOptions<C, P> {
+  readonly handler: EdgeRouteHandler<M, F, E, C, P, Params, B>;
 }
 /**
  * Routes by `"METHOD /path"` (or `"/path"` for every method). `:name`
  * segments are params, a final `*` matches the rest of the path.
  */
-export type EdgeRoutes<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> = Readonly<Record<string, EdgeRouteHandler<M, F, E, C, P> | EdgeRoute<M, F, E, C, P>>>;
-export interface BetterEdge<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string> extends BetterServer<M, F, E, C, P> {
+export type EdgeRoutes<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> = Readonly<Record<string, EdgeRouteHandler<M, F, E, C, P, Readonly<Record<string, string>>, B> | EdgeRoute<M, F, E, C, P, Readonly<Record<string, string>>, B>>>;
+export interface BetterEdge<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string, B = unknown> extends BetterServer<M, F, E, C, P, B> {
   /**
    * A fetch handler (`Deno.serve`, Workers `fetch`) running as the caller.
    * `Result`s become JSON or Problem Details; `undefined` becomes 204.
    */
-  handler(fn: (request: Request, ctx: ServerContext<M, F, E, C, P>) => unknown, options?: MiddlewareOptions): EdgeHandler;
+  handler(fn: (request: Request, ctx: ServerContext<M, F, E, C, P, B>) => unknown, options?: MiddlewareOptions): EdgeHandler;
   /**
    * A router: each route runs as the caller, behind the shared guard in
    * `options` and its own. An unknown path answers 404 and a known path
@@ -144,20 +136,17 @@ export interface BetterEdge<M extends AnyModels, F extends AnyFunctions, E, C =
    * }, { basePath: '/api' }))
    * ```
    */
-  routes<K extends string>(routes: { readonly [Key in K]: EdgeRouteHandler<M, F, E, C, P, RouteParams<Key>> | EdgeRoute<M, F, E, C, P, RouteParams<Key>>; }, options?: ResourcesOptions): EdgeHandler;
+  routes<K extends string>(routes: { readonly [Key in K]: EdgeRouteHandler<M, F, E, C, P, RouteParams<Key>, B> | EdgeRoute<M, F, E, C, P, RouteParams<Key>, B>; }, options?: ResourcesOptions): EdgeHandler;
   /**
    * REST resources matching the API model, e.g.
    * `Deno.serve(bs.resources({ customers: true }))`: collection, item and
    * action paths. An unknown path answers 404 before auth resolves.
    */
-  resources(map: ResourceMap<M, Ref, ServerContext<M, F, E, C, P>["db"]>, options?: ResourcesOptions): EdgeHandler;
+  resources(map: ResourceMap<M, Ref, ServerContext<M, F, E, C, P, B>["db"]>, options?: ResourcesOptions): EdgeHandler;
 }
-export declare const SUPABASE_CORS_HEADERS: readonly string[];
-/** `CorsOptions` as `withCors` from `@supabase/middleware/cors` takes them. */
-export declare function corsConfig(cors: CorsOptions): WithCorsConfig;
 /** Fetch-handler integration for Supabase Edge Functions, Deno, Bun and Workers. */
-export declare function createEdge<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, A extends AnyAuthorizer | undefined = undefined>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: EdgeOptions & {
+export declare function createEdge<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, A extends AnyAuthorizer | undefined = undefined, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options?: EdgeOptions & {
   readonly authorizer?: A;
-}): BetterEdge<M, F, E, C, P, PermissionRef<A>>;
+}): BetterEdge<M, F, E, C, P, PermissionRef<A>, B>;
 //#endregion
-export { type ActionArgs, type BlockRequireOptions, type ContractOf, type EdgeExecutionContext, type EdgeHandler, type FunctionContract, type FunctionDefinition, type GuardOptions, type MiddlewareOptions, type ResourceAction, type ResourceContext, type ResourceHooks, type ResourceMap, type ResourceRouteOptions, type TypedFunction, defineAction };
+export { type ActionArgs, type BlockRequireOptions, type ContractOf, type CorsOptions, type EdgeExecutionContext, type EdgeHandler, type FunctionContract, type FunctionDefinition, type GuardOptions, type MiddlewareOptions, type ResourceAction, type ResourceContext, type ResourceHooks, type ResourceMap, type ResourceRouteOptions, SUPABASE_CORS_HEADERS, type TypedFunction, corsConfig, defineAction };

package/dist/edge/index.js

@@ -1,15 +1,16 @@
-import { n as dbError } from "../errors-8i6tSICm.js";
-import { a as ok, r as err } from "../result-BlgnMB0H.js";
-import { n as validate } from "../standard-B5fe2gnW.js";
-import { o as problemResponse } from "../problem-pIiL3WbE.js";
-import { a as unexpectedResponse, c as extendServer, o as withFlush, s as createServer } from "../adapter-CEjmtazZ.js";
-import { a as respond, o as settle, t as defaultExpose } from "../respond-DdhZ9Wbn.js";
-import { t as withBetterSupabase } from "../composite-M6zPs1Xm.js";
-import { r as defineAction } from "../resource-C8r5xGqY.js";
-import { i as requireCaller } from "../kit-MUK34-ZG.js";
+import { n as dbError } from "../errors-BV1SKTVs.js";
+import { a as ok, r as err } from "../result-DIeYscA3.js";
+import { n as validate } from "../standard-B1BigegP.js";
+import { o as problemResponse } from "../problem-JRCohp1j.js";
+import { a as unexpectedResponse, c as extendServer, o as withFlush, s as createServer } from "../adapter-B2WRsRIg.js";
+import { a as respond, o as settle, t as defaultExpose } from "../respond-Bhp3G__q.js";
+import { t as withBetterSupabase } from "../composite-BFatHqOU.js";
+import { r as defineAction } from "../resource-Bdkqi8jo.js";
+import { i as requireCaller } from "../kit-LTbHrWWD.js";
 import { t as withExtra } from "../extra-CGQ2_q3S.js";
-import { n as resourceRouter } from "../resources-BlZdLsWQ.js";
-import { t as EVERY_CALLER } from "../framework-INbjMZX1.js";
+import { n as resourceRouter } from "../resources-Ck7itNeX.js";
+import { n as corsConfig, t as SUPABASE_CORS_HEADERS } from "../cors-h_v7TPxl.js";
+import { t as EVERY_CALLER } from "../framework-Ch8bMmQY.js";
 import { t as FUNCTION_DESCRIPTOR } from "../function-contract-DmkBg19r.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { withCors } from "@supabase/middleware/cors";
@@ -152,27 +153,6 @@ function defineFunction(edge, definition) {
 }
 //#endregion
 //#region src/edge/index.ts
-const SUPABASE_CORS_HEADERS = [
-	"authorization",
-	"x-client-info",
-	"apikey",
-	"content-type"
-];
-/** `CorsOptions` as `withCors` from `@supabase/middleware/cors` takes them. */
-function corsConfig(cors) {
-	return {
-		origin: cors.origin === void 0 || typeof cors.origin === "string" ? cors.origin ?? "*" : [...cors.origin],
-		allowedHeaders: [...cors.headers ?? SUPABASE_CORS_HEADERS],
-		methods: [...cors.methods ?? [
-			"GET",
-			"POST",
-			"PATCH",
-			"DELETE",
-			"OPTIONS"
-		]],
-		...cors.maxAge === void 0 ? {} : { maxAge: cors.maxAge }
-	};
-}
 /** Fetch-handler integration for Supabase Edge Functions, Deno, Bun and Workers. */
 function createEdge(betterSupabase, options = {}) {
 	const server = createServer(betterSupabase, options);

package/dist/elysia/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../refusal-oD3ISM9h.js";
+import { n as RouteGuardOptions } from "../refusal-CufncwaN.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/elysia.d.ts

package/dist/elysia/index.js

@@ -1,5 +1,5 @@
 import { t as around } from "../shared-BmMcMoW9.js";
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-br4Ma9Cf.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-CFpfmjcS.js";
 import { bufferRequest } from "@supabase/middleware";
 //#region src/bridges/elysia.ts
 /**

package/dist/{embeddings-C2S14foD.d.ts → embeddings-lTUwzvW4.d.ts}

@@ -1,4 +1,4 @@
-import { d as KnowledgeSearchOptions, n as Embedder, o as KnowledgeHit, r as Knowledge } from "./knowledge-BXQ2-V0a.js";
+import { d as KnowledgeSearchOptions, n as Embedder, o as KnowledgeHit, r as Knowledge } from "./knowledge-CRk1jOAJ.js";
 import { EmbeddingModel, RerankingModel, SourceDocumentUIPart, Tool, embedMany } from "ai";
 //#region src/ai-sdk/embeddings/embeddings.d.ts
 type ProviderOptions = Parameters<typeof embedMany>[0]["providerOptions"];

package/dist/{ended-nIdGCHxk.d.ts → ended-DQmwYosO.d.ts}

@@ -1,5 +1,5 @@
-import { m as RequestContext } from "./plugin-CDLJRFFg.js";
-import { g as StoredSession, r as AuthState, u as CookieOptions } from "./resolve-w9EpHzuM.js";
+import { m as RequestContext } from "./plugin-D-95Q0w0.js";
+import { g as StoredSession, r as AuthState, u as CookieOptions } from "./resolve-Bqb8TMTt.js";
 //#region src/auth/refresh.d.ts
 interface RefreshOptions {
   readonly url: string;

package/dist/{entitlements-BvU5dLpW.js → entitlements-C8UvF1Rz.js}

@@ -1,6 +1,6 @@
-import { t as AsyncResult } from "./result-BlgnMB0H.js";
-import { j as run, o as blockCall } from "./block-helpers-CfG_MvDR.js";
-import { r as withBlockHooks } from "./block-hooks-BsXncUlZ.js";
+import { t as AsyncResult } from "./result-DIeYscA3.js";
+import { j as run, o as blockCall } from "./block-helpers-DkVZNDrj.js";
+import { r as withBlockHooks } from "./block-hooks-C22vuIUd.js";
 //#region src/blocks/entitlements/entitlements.ts
 /** The Stripe event sent when a customer's active entitlements change. */
 const ENTITLEMENTS_UPDATED = "entitlements.active_entitlement_summary.updated";

package/dist/{entitlements-CbzCKalR.d.ts → entitlements-DgkeStXd.d.ts}

@@ -1,5 +1,5 @@
-import { t as AuthSnapshot } from "./bind-a7sUgvf4.js";
-import { t as AuthSession } from "./view-Dv0A949a.js";
+import { t as AuthSnapshot } from "./bind-CTNKpBM6.js";
+import { t as AuthSession } from "./view-Bf7e07rQ.js";
 //#region src/auth/entitlements.d.ts
 /**
  * One entry of the `memberships` claim when a hook writes it as a list.

package/dist/env/index.d.ts

@@ -1,2 +1,2 @@
-import { a as EnvResult, c as InlineJwks, d as loadEnv, f as parseEnv, i as EnvOptions, l as PublicEnv, m as toServerEnv, n as ENV_VARIABLES, o as EnvSource, p as publicEnv, r as EnvIssue, s as EnvValidationError, t as BetterSupabaseEnv, u as envSchema } from "../index-CETRk4YO.js";
+import { a as EnvResult, c as InlineJwks, d as loadEnv, f as parseEnv, i as EnvOptions, l as PublicEnv, m as toServerEnv, n as ENV_VARIABLES, o as EnvSource, p as publicEnv, r as EnvIssue, s as EnvValidationError, t as BetterSupabaseEnv, u as envSchema } from "../index-CxmVzT-3.js";
 export { BetterSupabaseEnv, ENV_VARIABLES, EnvIssue, EnvOptions, EnvResult, EnvSource, EnvValidationError, InlineJwks, PublicEnv, envSchema, loadEnv, parseEnv, publicEnv, toServerEnv };

package/dist/env/index.js

@@ -11,7 +11,12 @@ const ENV_VARIABLES = {
 	url: PREFIXES.map((prefix) => `${prefix}SUPABASE_URL`),
 	publishableKey: PREFIXES.flatMap((prefix) => [`${prefix}SUPABASE_PUBLISHABLE_KEY`, `${prefix}SUPABASE_PUBLISHABLE_DEFAULT_KEY`]),
 	secretKey: ["SUPABASE_SECRET_KEY"],
-	dbUrl: ["SUPABASE_DB_URL", "DATABASE_URL"],
+	dbUrl: [
+		"SUPABASE_DB_URL",
+		"DATABASE_URL",
+		"POSTGRES_URL",
+		"POSTGRES_URL_NON_POOLING"
+	],
 	jwksUrl: ["SUPABASE_JWKS_URL"],
 	jwks: ["SUPABASE_JWKS"],
 	readUrl: ["SUPABASE_READ_URL"],

package/dist/{envelope-CHYk5MXU.js → envelope-C4Z55LKW.js}

@@ -1,9 +1,9 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { a as ok, r as err } from "./result-BlgnMB0H.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { a as ok, r as err } from "./result-DIeYscA3.js";
 import { n as isRecord } from "./guards-6F2bCtQR.js";
 import { o as tenantFrom, s as tenantPathsFor } from "./claims-PqzCxaTD.js";
-import { n as impersonatorClaim, r as impersonatorOf } from "./impersonation-CDeCzZP6.js";
-import { i as delegatedClaims, n as PERMISSION_CAP_CLAIM, o as permissionCapOf, t as DELEGATION_CLAIMS } from "./delegation-Dt8hMJWu.js";
+import { n as impersonatorClaim, r as impersonatorOf } from "./impersonation-DxU6yHJV.js";
+import { i as delegatedClaims, n as PERMISSION_CAP_CLAIM, o as permissionCapOf, t as DELEGATION_CLAIMS } from "./delegation-B7uNnz6z.js";
 //#region src/blocks/jobs/envelope.ts
 /** Marks a payload that carries a job context; pgmq stores it as the payload. */
 const ENVELOPE = "$bs";

package/dist/{errors-8i6tSICm.js → errors-BV1SKTVs.js}

@@ -70,6 +70,20 @@ const isConflict = constraintGuard("conflict");
 const isCheck = constraintGuard("check");
 /** A foreign key violation, optionally for one constraint (`ForeignKeyConstraint`). */
 const isForeignKey = constraintGuard("foreign_key");
+/**
+* Builds the factory `.orThrow()` takes from handlers per error kind and per
+* SQLSTATE code. A handler that returns `undefined`, and an error no handler
+* matches, throw a `DbException`.
+*/
+function matchDbError(matchers) {
+	return (error) => {
+		return (error.code === void 0 || !matchers.codes ? void 0 : Object.hasOwn(matchers.codes, error.code) ? matchers.codes[error.code] : void 0)?.(error) ?? kindHandler(matchers, error)?.(error) ?? new DbException(error);
+	};
+}
+function kindHandler(matchers, error) {
+	if (!Object.hasOwn(matchers, error.kind)) return;
+	return matchers[error.kind];
+}
 const CONSTRAINT_IN_MESSAGE = /constraint "([^"]+)"/;
 const KEY_COLUMNS_IN_DETAILS = /^Key \(([^)]+)\)=/;
 const COLUMN_IN_MESSAGE = /column "([^"]+)"/;
@@ -298,4 +312,4 @@ function quotaDetails(details) {
 	};
 }
 //#endregion
-export { isConflict as a, mapDbError as c, isCheck as i, statusOf as l, dbError as n, isDbError as o, dbErrorOf as r, isForeignKey as s, MAX_AFFECTED_MARKER as t, withMaxAffected as u };
+export { isConflict as a, mapDbError as c, withMaxAffected as d, isCheck as i, matchDbError as l, dbError as n, isDbError as o, dbErrorOf as r, isForeignKey as s, MAX_AFFECTED_MARKER as t, statusOf as u };

package/dist/{errors-PIpcoe4z.js → errors-D3BR8iUk.js}

@@ -1,6 +1,6 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { n as dbError, o as isDbError } from "./errors-8i6tSICm.js";
-import { s as toDbError } from "./result-BlgnMB0H.js";
+import { n as dbError, o as isDbError } from "./errors-BV1SKTVs.js";
+import { s as toDbError } from "./result-DIeYscA3.js";
 //#region src/storage/errors.ts
 /** Maps a Storage error (`StorageApiError`, fetch failures) to a `DbError`. */
 function fromStorageError(raw, table) {

package/dist/{escape-like-AUEPn-C5.d.ts → escape-like-B339PlP-.d.ts}

@@ -1,4 +1,4 @@
-import { b as DbError, x as DbErrorKind } from "./result-Cj3yWhjH.js";
+import { b as DbError, x as DbErrorKind } from "./result-BREt7qOh.js";
 //#region src/core/db-exception.d.ts
 /** Thrown by `.orThrow()`. Carries the plain `DbError` as `error`. */
 declare class DbException extends Error {

package/dist/eve/index.d.ts

@@ -1,8 +1,8 @@
-import { a as ResolveAuthOptions, r as AuthState } from "../resolve-w9EpHzuM.js";
-import { i as CredentialRef, r as CredentialProvider } from "../provider-9gBq9W6k.js";
-import { i as AiChat } from "../ai-chat-3GBSlFR4.js";
-import { a as Inbox } from "../inbox-3ql4phyr.js";
-import { a as EveMemoryToolsContext, c as MemoryDocumentConflictError, d as supabaseDocumentBackend, f as supabaseMemory, i as EveMemoryTool, l as SupabaseDocumentBackendOptions, m as EveSessionContext, n as EveMemoryContext, o as EveRecallMessage, p as EveSessionAuth, r as EveMemoryProvider, s as EveRecallResult, t as EveDocumentBackend, u as SupabaseMemoryOptions } from "../eve-DUF70Vgi.js";
+import { a as ResolveAuthOptions, r as AuthState } from "../resolve-Bqb8TMTt.js";
+import { i as CredentialRef, r as CredentialProvider } from "../provider-CNs0Jx0I.js";
+import { i as AiChat } from "../ai-chat-D-2MH1sU.js";
+import { a as Inbox } from "../inbox-Du5aPwKB.js";
+import { a as EveMemoryToolsContext, c as MemoryDocumentConflictError, d as supabaseDocumentBackend, f as supabaseMemory, i as EveMemoryTool, l as SupabaseDocumentBackendOptions, m as EveSessionContext, n as EveMemoryContext, o as EveRecallMessage, p as EveSessionAuth, r as EveMemoryProvider, s as EveRecallResult, t as EveDocumentBackend, u as SupabaseMemoryOptions } from "../eve-C_Onyk_j.js";
 //#region src/eve/auth.d.ts
 /** Thrown by `supabaseAuth` so eve answers with `response` instead of downgrading to anonymous. */
 export declare class EveAuthRejection extends Error {

package/dist/eve/index.js

@@ -1,8 +1,8 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
 import { n as isRecord } from "../guards-6F2bCtQR.js";
 import { a as tenantClaimPaths, n as claimAt, t as DEFAULT_CLAIMS } from "../claims-PqzCxaTD.js";
-import { r as resolveAuth } from "../resolve-CAR9oaKW.js";
-import { t as isAnonymousUser } from "../view-DZ63nqwt.js";
+import { r as resolveAuth } from "../resolve-f8QNuYI3.js";
+import { t as isAnonymousUser } from "../view-CYX1wsgp.js";
 import { t as importOptionalPeer } from "../optional-peer-Dx8TaYXw.js";
 //#region src/eve/ids.ts
 /** A UUID (version 8) from the SHA-256 of `input`, so the same input always gets the same id. */

package/dist/{eve-DUF70Vgi.d.ts → eve-C_Onyk_j.d.ts}

@@ -1,5 +1,5 @@
-import { d as KnowledgeSearchOptions, r as Knowledge } from "./knowledge-BXQ2-V0a.js";
-import { t as Memory } from "./types-6oiy6rIa.js";
+import { d as KnowledgeSearchOptions, r as Knowledge } from "./knowledge-CRk1jOAJ.js";
+import { t as Memory } from "./types-B4zhT6dq.js";
 //#region src/eve/types.d.ts
 /**
  * eve's `SessionAuthContext`, typed structurally so this entry never imports

package/dist/events/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as SaasEventData, A as CollaborationEventData, B as FormEventData, C as BillingEventData, Ct as EventSpec, D as BlockEventPattern, Dt as event, E as BlockEventMeta, Et as defineEvents, F as CredentialEventData, G as InviteCodeEventData, H as InboxEventData, I as DataExportEventData, J as NotificationEventData, K as LegalHoldEventData, M as CommerceEventData, N as CommerceSubjectEventData, O as BlockEventType, Ot as mergeEvents, P as ConnectorEventData, Q as PushDeviceEventData, S as BLOCK_EVENT_RENAMES, St as EventMapOf, T as BlockEvent, Tt as MergedEventMap, U as IncomingWebhookEventData, V as FormSubmissionEventData, W as InvitationEventData, X as OrganizationDomainEventData, Y as OrganizationDeletionEventData, Z as OrganizationEventData, _ as AnnouncementEventData, _t as WorkflowRunEventData, at as SsoProviderEventData, b as AuditRevealEventData, bt as onBlockEvent, ct as SubjectEventType, dt as TemplateEventData, et as SaasSubjectEventData, ft as TimeEntryEventData, g as AiToolEventData, gt as WorkflowEventData, h as AiProviderKeyEventData, ht as WebhookEventData, it as SignatureEventData, j as CommentEventData, k as BlockEventsMatching, lt as SupportEventData, m as AiChatEventData, mt as WaitlistEventData, nt as ScimEventData, ot as StorageObjectEventData, p as AgentEventData, pt as TimesheetEventData, q as NotificationDeliveryEventData, rt as SettingEventData, st as SubjectEventData, tt as SchedulingEventData, ut as TemplateApplicationEventData, v as ApiKeyEventData, vt as blockEventAttributes, w as BlockEmit, wt as Events, x as BLOCK_ATTRIBUTES, xt as EventMap, y as AttachmentEventData, yt as emitBlockEvent, z as FlagEventData } from "../events-CTreRrgP.js";
-import { C as QuoteEventData, S as PipelineStageEventData, T as WorkItemEventData, _ as EngagementEventData, a as RowEventData, b as PartyEventData, c as httpSink, d as toHttp, f as ApplicationEventData, g as EmployeeEventData, h as DealEventData, i as ROW_EVENT_TYPES, l as isCloudEvent, m as CollectionEventData, n as HttpMode, o as forwardMutations, p as CollectionEntryEventData, r as HttpSinkOptions, s as fromHttp, t as ForwardOptions, u as toCloudEvents, v as InvoiceEventData, w as SlaEventData, x as PipelineEventData, y as JobEventData } from "../index-BlqrGvb3.js";
-import { a as ForwardBlockOptions, i as EventSink, n as CloudEventOptions, o as blockCloudEvent, r as DataschemaContext, s as forwardBlockEvents, t as CloudEvent } from "../cloud-event-5rCEzIgK.js";
+import { $ as SaasEventData, A as CollaborationEventData, B as FormEventData, C as BillingEventData, Ct as EventSpec, D as BlockEventPattern, Dt as event, E as BlockEventMeta, Et as defineEvents, F as CredentialEventData, G as InviteCodeEventData, H as InboxEventData, I as DataExportEventData, J as NotificationEventData, K as LegalHoldEventData, M as CommerceEventData, N as CommerceSubjectEventData, O as BlockEventType, Ot as mergeEvents, P as ConnectorEventData, Q as PushDeviceEventData, S as BLOCK_EVENT_RENAMES, St as EventMapOf, T as BlockEvent, Tt as MergedEventMap, U as IncomingWebhookEventData, V as FormSubmissionEventData, W as InvitationEventData, X as OrganizationDomainEventData, Y as OrganizationDeletionEventData, Z as OrganizationEventData, _ as AnnouncementEventData, _t as WorkflowRunEventData, at as SsoProviderEventData, b as AuditRevealEventData, bt as onBlockEvent, ct as SubjectEventType, dt as TemplateEventData, et as SaasSubjectEventData, ft as TimeEntryEventData, g as AiToolEventData, gt as WorkflowEventData, h as AiProviderKeyEventData, ht as WebhookEventData, it as SignatureEventData, j as CommentEventData, k as BlockEventsMatching, lt as SupportEventData, m as AiChatEventData, mt as WaitlistEventData, nt as ScimEventData, ot as StorageObjectEventData, p as AgentEventData, pt as TimesheetEventData, q as NotificationDeliveryEventData, rt as SettingEventData, st as SubjectEventData, tt as SchedulingEventData, ut as TemplateApplicationEventData, v as ApiKeyEventData, vt as blockEventAttributes, w as BlockEmit, wt as Events, x as BLOCK_ATTRIBUTES, xt as EventMap, y as AttachmentEventData, yt as emitBlockEvent, z as FlagEventData } from "../events-P3raDX2E.js";
+import { C as QuoteEventData, S as PipelineStageEventData, T as WorkItemEventData, _ as EngagementEventData, a as RowEventData, b as PartyEventData, c as httpSink, d as toHttp, f as ApplicationEventData, g as EmployeeEventData, h as DealEventData, i as ROW_EVENT_TYPES, l as isCloudEvent, m as CollectionEventData, n as HttpMode, o as forwardMutations, p as CollectionEntryEventData, r as HttpSinkOptions, s as fromHttp, t as ForwardOptions, u as toCloudEvents, v as InvoiceEventData, w as SlaEventData, x as PipelineEventData, y as JobEventData } from "../index-BpyBH5O2.js";
+import { a as ForwardBlockOptions, i as EventSink, n as CloudEventOptions, o as blockCloudEvent, r as DataschemaContext, s as forwardBlockEvents, t as CloudEvent } from "../cloud-event-DXkNoI6v.js";
 export { type AgentEventData, type AiChatEventData, type AiProviderKeyEventData, type AiToolEventData, type AnnouncementEventData, type ApiKeyEventData, type ApplicationEventData, type AttachmentEventData, type AuditRevealEventData, BLOCK_ATTRIBUTES, BLOCK_EVENT_RENAMES, type BillingEventData, type BlockEmit, type BlockEvent, type BlockEventMeta, type BlockEventPattern, type BlockEventType, type BlockEventsMatching, type CloudEvent, type CloudEventOptions, type CollaborationEventData, type CollectionEntryEventData, type CollectionEventData, type CommentEventData, type CommerceEventData, type CommerceSubjectEventData, type ConnectorEventData, type CredentialEventData, type DataExportEventData, type DataschemaContext, type DealEventData, type EmployeeEventData, type EngagementEventData, type EventMap, type EventMapOf, type EventSink, type EventSpec, type Events, type FlagEventData, type FormEventData, type FormSubmissionEventData, type ForwardBlockOptions, ForwardOptions, HttpMode, HttpSinkOptions, type InboxEventData, type IncomingWebhookEventData, type InvitationEventData, type InviteCodeEventData, type InvoiceEventData, type JobEventData, type LegalHoldEventData, type MergedEventMap, type NotificationDeliveryEventData, type NotificationEventData, type OrganizationDeletionEventData, type OrganizationDomainEventData, type OrganizationEventData, type PartyEventData, type PipelineEventData, type PipelineStageEventData, type PushDeviceEventData, type QuoteEventData, ROW_EVENT_TYPES, RowEventData, type SaasEventData, type SaasSubjectEventData, type SchedulingEventData, type ScimEventData, type SettingEventData, type SignatureEventData, type SlaEventData, type SsoProviderEventData, type StorageObjectEventData, type SubjectEventData, type SubjectEventType, type SupportEventData, type TemplateApplicationEventData, type TemplateEventData, type TimeEntryEventData, type TimesheetEventData, type WaitlistEventData, type WebhookEventData, type WorkItemEventData, type WorkflowEventData, type WorkflowRunEventData, blockCloudEvent, blockEventAttributes, defineEvents, emitBlockEvent, event, forwardBlockEvents, forwardMutations, fromHttp, httpSink, isCloudEvent, mergeEvents, onBlockEvent, toCloudEvents, toHttp };

package/dist/{events-CTreRrgP.d.ts → events-P3raDX2E.d.ts}

@@ -1,7 +1,7 @@
 /// <reference lib="esnext.temporal" />
-import { b as DbError } from "./result-Cj3yWhjH.js";
-import { g as MutationKind, h as MutationIntent, v as Operation } from "./executor-DoE-5iM8.js";
-import { m as RequestContext } from "./plugin-CDLJRFFg.js";
+import { b as DbError } from "./result-BREt7qOh.js";
+import { g as MutationKind, h as MutationIntent, v as Operation } from "./executor-BnMC0lj3.js";
+import { m as RequestContext } from "./plugin-D-95Q0w0.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
 //#region src/core/event-map.d.ts
 /**

package/dist/{executor-BXSHYyW2.js → executor-BiB0wMBA.js}

@@ -1,10 +1,10 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { c as mapDbError, n as dbError } from "./errors-8i6tSICm.js";
-import { n as invalidRequest } from "./build-Cx08LOT7.js";
+import { c as mapDbError, n as dbError } from "./errors-BV1SKTVs.js";
+import { n as invalidRequest } from "./build-C-D_vn0U.js";
 import { t as lookupOf } from "./lookup-BaP5bI27.js";
-import { a as ok, r as err, s as toDbError } from "./result-BlgnMB0H.js";
+import { a as ok, r as err, s as toDbError } from "./result-DIeYscA3.js";
 import { n as simplifyOrFalse } from "./simplify-DDO0j0LI.js";
-import { n as whereClause, t as integer } from "./shared-DbO3Dfms.js";
+import { n as whereClause, t as integer } from "./shared-C9zvURqC.js";
 //#region src/compile/sqlite.ts
 /**
 * The operation needs something the SQLite dialect can't express: an

package/dist/{executor-DoE-5iM8.d.ts → executor-BnMC0lj3.d.ts}

@@ -1,5 +1,5 @@
-import { f as Result, w as ErrorMapper } from "./result-Cj3yWhjH.js";
-import { B as TableMeta, O as RelationMeta, d as Codec, g as FunctionMeta } from "./types-YfwpIE-d.js";
+import { T as ErrorMapper, f as Result } from "./result-BREt7qOh.js";
+import { V as TableMeta, d as Codec, g as FunctionMeta, k as RelationMeta } from "./types-BrpW5ixT.js";
 //#region src/ir/types.d.ts
 /**
  * The query IR. Every repository call becomes one of these operations; the

package/dist/{executor-DKrZr3AC.d.ts → executor-CvsNcQsa.d.ts}

@@ -1,6 +1,6 @@
-import { T as RawDbError } from "./result-Cj3yWhjH.js";
-import { B as TableMeta } from "./types-YfwpIE-d.js";
-import { r as Executor, v as Operation } from "./executor-DoE-5iM8.js";
+import { E as RawDbError } from "./result-BREt7qOh.js";
+import { V as TableMeta } from "./types-BrpW5ixT.js";
+import { r as Executor, v as Operation } from "./executor-BnMC0lj3.js";
 //#region src/compile/sqlite.d.ts
 /** A value SQLite binds: booleans become `0`/`1`, objects JSON text. */
 type SqliteValue = string | number | bigint | null;

package/dist/{executor-D1kYY5BA.js → executor-CxGQiQN_.js}

@@ -1,8 +1,8 @@
 import { r as isPlainObject } from "./clone-dN9XOL1K.js";
-import { c as mapDbError, n as dbError, u as withMaxAffected } from "./errors-8i6tSICm.js";
-import { a as ok, r as err, s as toDbError } from "./result-BlgnMB0H.js";
+import { c as mapDbError, d as withMaxAffected, n as dbError } from "./errors-BV1SKTVs.js";
+import { a as ok, r as err, s as toDbError } from "./result-DIeYscA3.js";
+import { n as quoteIdent, t as compileSql } from "./sql-BPKRNutj.js";
 import { t as fromPgError } from "./pg-error-BV_X8Isq.js";
-import { n as quoteIdent, t as compileSql } from "./sql-DJrXG-3Z.js";
 //#region src/postgres/executor.ts
 /**
 * A `count(*)::bigint`, which node-postgres returns as text. A count past

package/dist/{executor-BBHgjUJu.d.ts → executor-D1hECPGG.d.ts}

@@ -1,4 +1,4 @@
-import { r as Executor } from "./executor-DoE-5iM8.js";
+import { r as Executor } from "./executor-BnMC0lj3.js";
 //#region src/postgres/executor.d.ts
 /**
  * Anything that runs parameterized SQL: `ctx.postgres` from

package/dist/{executor-BINiCFNp.d.ts → executor-DfdC00xr.d.ts}

@@ -1,4 +1,4 @@
-import { z as WorkflowGraph } from "./types-vaoP9S9_.js";
+import { B as WorkflowGraph } from "./types-Bq64h5nY.js";
 //#region src/blocks/workflow-builder/executor.d.ts
 /** The record a run belongs to. */
 interface GraphSubject {

package/dist/expo/index.d.ts

@@ -1,7 +1,7 @@
-import { a as AnyModels, i as AnyFunctions } from "../types-YfwpIE-d.js";
-import { t as BetterSupabase } from "../define-DxHHbNEb.js";
-import { i as ServerContext, n as ContextOptions, s as ServerOptions, t as BetterServer } from "../server-types-OohhIQb2.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-C7I8kLK_.js";
+import { a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
+import { t as BetterSupabase } from "../define-M_r1d2AT.js";
+import { a as ServerContext, c as ServerOptions, n as BetterServer, r as ContextOptions } from "../server-types-BKN_R4Ws.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-CEBC6KUX.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { ImmutableRequest, MiddlewareFunction } from "expo-server";
@@ -31,6 +31,8 @@ export interface ExpoContextOptions extends Omit<ContextOptions, "refresh">, Gua
   /**
    * Refresh an expired cookie session and write the new cookies with
    * `setResponseHeaders`. Defaults to true; bearer tokens never refresh.
+   * When `bs.middleware()` already ran for the request, the context reads the
+   * session it refreshed and never calls Auth again, whatever this option says.
    */
   readonly refresh?: boolean;
 }
@@ -48,25 +50,25 @@ export interface ExpoMiddlewareOptions extends MiddlewareOptions {
    */
   readonly publicPaths?: readonly string[];
 }
-export interface BetterExpo<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> extends BetterServer<M, F, E, C, P> {
+export interface BetterExpo<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> extends BetterServer<M, F, E, C, P, B> {
   /**
    * The verified caller for a server loader, API route or middleware: a
    * bearer token first, the session cookie second. Refreshed session
    * cookies go out through `setResponseHeaders`. With `allow`, a refused
    * caller throws a `StatusError` (401 or 403) that Expo Router answers.
    */
-  request(request: ExpoRequest, options?: ExpoContextOptions): Promise<ServerContext<M, F, E, C, P>>;
+  request(request: ExpoRequest, options?: ExpoContextOptions): Promise<ServerContext<M, F, E, C, P, B>>;
   /**
    * A server loader (`export const loader = bs.loader(...)`) that runs `fn`
    * as the caller. A `DbException` from `.orThrow()` becomes a `StatusError`
    * with the error's status. Throws during static rendering, which has no request.
    */
-  loader<T>(fn: (ctx: ServerContext<M, F, E, C, P>, params: ExpoParams, request: ImmutableRequest) => Promise<T> | T, options?: ExpoContextOptions): (request: ImmutableRequest | undefined, params: ExpoParams) => Promise<T>;
+  loader<T>(fn: (ctx: ServerContext<M, F, E, C, P, B>, params: ExpoParams, request: ImmutableRequest) => Promise<T> | T, options?: ExpoContextOptions): (request: ImmutableRequest | undefined, params: ExpoParams) => Promise<T>;
   /**
    * An API route handler (`export const GET = bs.handler(...)`): `Result`s
    * become JSON or Problem Details, `undefined` becomes 204.
    */
-  handler(fn: (request: Request, ctx: ServerContext<M, F, E, C, P>, params: ExpoParams) => unknown, options?: MiddlewareOptions): (request: Request, params?: ExpoParams) => Promise<Response>;
+  handler(fn: (request: Request, ctx: ServerContext<M, F, E, C, P, B>, params: ExpoParams) => unknown, options?: MiddlewareOptions): (request: Request, params?: ExpoParams) => Promise<Response>;
   /**
    * `+middleware.ts`: refreshes an expired cookie session once per request,
    * before loaders run, and redirects refused callers when `redirectTo` is set.
@@ -74,6 +76,6 @@ export interface BetterExpo<M extends AnyModels, F extends AnyFunctions, E, C =
   middleware(options?: ExpoMiddlewareOptions): MiddlewareFunction;
 }
 /** Expo Router integration: server loaders, API routes and `+middleware.ts`. */
-export declare function createExpo<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: ExpoOptions): BetterExpo<M, F, E, C, P>;
+export declare function createExpo<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options?: ExpoOptions): BetterExpo<M, F, E, C, P, B>;
 //#endregion
 export type { ExpoParams, GuardOptions, MiddlewareOptions, ToExpoOptions };

package/dist/expo/index.js

@@ -1,9 +1,9 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
-import { c as toProblem } from "../problem-pIiL3WbE.js";
-import { a as unexpectedResponse, c as extendServer, s as createServer, x as refreshFor } from "../adapter-CEjmtazZ.js";
-import { m as serializeCookie } from "../resolve-CAR9oaKW.js";
-import { a as respond, r as guard, t as defaultExpose } from "../respond-DdhZ9Wbn.js";
-import { t as withBetterSupabase } from "../composite-M6zPs1Xm.js";
+import { c as toProblem } from "../problem-JRCohp1j.js";
+import { a as unexpectedResponse, c as extendServer, s as createServer, x as refreshFor } from "../adapter-B2WRsRIg.js";
+import { m as serializeCookie } from "../resolve-f8QNuYI3.js";
+import { a as respond, r as guard, t as defaultExpose } from "../respond-Bhp3G__q.js";
+import { t as withBetterSupabase } from "../composite-BFatHqOU.js";
 import { r as handoffOf } from "../shared-BmMcMoW9.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { StatusError, setResponseHeaders } from "expo-server";
@@ -37,6 +37,23 @@ function toRequest(request) {
 		headers: new Headers(request.headers)
 	});
 }
+/**
+* expo-server wraps the incoming request in a new `ImmutableRequest` for the
+* middleware and for each loader, so a handoff can't key on the object. The
+* old cookie header pins it to one session: another request with the same key
+* carries the same cookies and would refresh to the same session.
+*/
+const HANDOFF_TTL_MS = 1e4;
+function handoffKey(request) {
+	return `${request.method} ${request.url}\n${request.headers.get("cookie") ?? ""}`;
+}
+/** The request with its cookie header replaced, keeping method and body. */
+function withCookie(request, cookie) {
+	if (cookie === void 0) return request;
+	const headers = new Headers(request.headers);
+	headers.set("cookie", cookie);
+	return new Request(request, { headers });
+}
 /** Sends the cookies and headers `ctx.apply` would add to a response. */
 function writeHeaders(ctx) {
 	const cookies = ctx.cookies().map(serializeCookie);
@@ -59,11 +76,28 @@ function statusError(error, expose) {
 function createExpo(betterSupabase, options = {}) {
 	const server = createServer(betterSupabase, options);
 	const expose = options.exposeErrors ?? defaultExpose();
+	const handoffs = /* @__PURE__ */ new Map();
+	const handOff = (incoming, cookie) => {
+		const now = Date.now();
+		for (const [key, entry] of handoffs) {
+			if (entry.expires > now) break;
+			handoffs.delete(key);
+		}
+		handoffs.set(handoffKey(incoming), {
+			cookie,
+			expires: now + HANDOFF_TTL_MS
+		});
+	};
+	const handedOff = (incoming) => {
+		const entry = handoffs.get(handoffKey(incoming));
+		return entry && entry.expires > Date.now() ? entry : void 0;
+	};
 	const request = async (incoming, contextOptions = {}) => {
 		const { allow, aal, scopes, refresh = true, ...rest } = contextOptions;
-		const ctx = await server.context(toRequest(incoming), {
+		const handoff = handedOff(incoming);
+		const ctx = await server.context(handoff ? withCookie(toRequest(incoming), handoff.cookie) : toRequest(incoming), {
 			...rest,
-			refresh
+			refresh: handoff ? false : refresh
 		});
 		writeHeaders(ctx);
 		if (allow !== void 0 || aal !== void 0 || scopes !== void 0) {
@@ -114,6 +148,7 @@ function createExpo(betterSupabase, options = {}) {
 				const target = redirectTo === void 0 ? void 0 : new URL(redirectTo, url);
 				if (!target || under(url.pathname, target.pathname) || publicPaths.some((path) => under(url.pathname, path)) || !guard(ctx.auth, allow, aal, scopes)) {
 					writeHeaders(ctx);
+					handOff(incoming, ctx.resolution.cookies.length > 0 ? ctx.resolution.requestCookies.map((cookie) => `${cookie.name}=${encodeURIComponent(cookie.value)}`).join("; ") : void 0);
 					return;
 				}
 				target.searchParams.set("next", url.pathname + url.search);

package/dist/expo-sqlite/index.d.ts

@@ -1,6 +1,6 @@
-import { r as Executor } from "../executor-DoE-5iM8.js";
-import { n as PowerSyncExecutorOptions, t as PowerSyncDatabaseLike } from "../executor-DKrZr3AC.js";
-import { a as checkSqlite, n as sqliteTables, r as watch, t as WatchOptions } from "../watch-DDuWYv0Y.js";
+import { r as Executor } from "../executor-BnMC0lj3.js";
+import { n as PowerSyncExecutorOptions, t as PowerSyncDatabaseLike } from "../executor-CvsNcQsa.js";
+import { a as checkSqlite, n as sqliteTables, r as watch, t as WatchOptions } from "../watch-ry70AEm6.js";
 //#region src/expo-sqlite/executor.d.ts
 /** What an expo-sqlite database or exclusive transaction can run. */
 interface ExpoSqliteContextLike {